Entrypoint redirection in the correct port on GKE

Traefik Traefik v2
, ,
1

Hi, I deploy a traefik helm cart on GKE cluster using the las version: 8.7.0 and appVersion: 2.2.1

I just add some additionalArguments:

  - "--api.insecure=true"
  - "--log.level=DEBUG"
  - "--providers.kubernetesIngress.ingressClass=traefik"
  - "--providers.kubernetesIngress=true"
  - "--serversTransport.insecureSkipVerify=true"
  - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
  - "--entrypoints.web.http.redirections.entryPoint.scheme=https"

I want to archive the entry point http to https redirection https://docs.traefik.io/routing/entrypoints/#redirection

By default the helm chart create these additional arguments:

        - --entryPoints.traefik.address=:9000/tcp
        - --entryPoints.web.address=:8000/tcp
        - --entryPoints.websecure.address=:8443/tcp

If I change the port configuration:

# Configure ports
ports:
  # The name of this one can't be changed as it is used for the readiness and
  # liveness probes, but you can adjust its config to your liking
  traefik:
    port: 9000
    # Use hostPort if set.
    # hostPort: 9000

    # Defines whether the port is exposed if service.type is LoadBalancer or
    # NodePort.
    #
    # You SHOULD NOT expose the traefik port on production deployments.
    # If you want to access it from outside of your cluster,
    # use `kubectl proxy` or create a secure ingress
    expose: true
    # The exposed port for this service
    exposedPort: 9000
    # The port protocol (TCP/UDP)
    protocol: TCP
  web:
    port: 80
    # hostPort: 8000
    expose: true
    exposedPort: 80
    # The port protocol (TCP/UDP)
    protocol: TCP
    # Use nodeport if set. This is useful if you have configured Traefik in a
    # LoadBalancer
    # nodePort: 32080
  websecure:
    port: 443
    # hostPort: 8443
    expose: true
    exposedPort: 443
    # The port protocol (TCP/UDP)
    protocol: TCP
    # nodePort: 32443

I get this error:

traefik.go:72: command traefik error: error while building entryPoint web: error preparing server: error opening listener: listen tcp :80: bind: permission denied

This is my Ingress:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.entrypoints: web, websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
  generation: 1
  labels:
    app: test-shopmates
    chart: shopmates-3.2.1_trf_1
    heritage: Tiller
    release: test
  name: test-shopmates
  namespace: test
spec:
  rules:
  - host: test1.company.it
    http:
      paths:
      - backend:
          serviceName: test-shopmates
          servicePort: http
        path: /
      - backend:
          serviceName: test-shopmates
          servicePort: https
        path: /
  tls:
  - hosts:
    - test1.company.it
    secretName: test1.company.it-tls
status:
  loadBalancer: {}

The https call work fine:

curl -iI  https://test1.company.it
HTTP/2 200
content-type: text/html; charset=utf-8
date: Thu, 25 Jun 2020 12:21:35 GMT
server: Apache/2.4.37 (Unix) OpenSSL/1.1.0j PHP/7.1.25
set-cookie: PrestaShop-36cf65be04f0b0bc56b846b2de908099=def5020014b6b2a079fb216c44360003fced85588307808652ac35fb49d03288eb03d6669967c9030a5470039b8a23384268705af6699d772b31e50b480d19951fa6b06e224d4604ad7c023bdb77c14dd23345118c5b86556104549675dcf6abcc93a873446774e4231150c2d575f79cafcff8e630c7bc89ac76072d91c7380f56c6918a655bc7a81400302e274b8f05c98b023a9bbceee08ec0132b3e24a1; expires=Wed, 15-Jul-2020 12:21:35 GMT; Max-Age=1728000; path=/; domain=test1.shopmates.it; secure; HttpOnly
x-powered-by: PHP/7.1.25

The http call is redirect to a wrong path with a wrong port https://test1.company.it:8443/tcp/:

curl -iI  http://test1.company.it
HTTP/1.1 308 Permanent Redirect
Location: https://test1.company.it:8443/tcp/
Date: Thu, 25 Jun 2020 12:25:14 GMT
Content-Length: 18
Content-Type: text/plain; charset=utf-8

What I have to do to redirect http://test1.company.it to https://test1.company.it ?

2

I'm having the exact same problem!

$ curl -I http://my1337.tech
HTTP/1.1 308 Permanent Redirect
Location: https://my1337.tech:8443/tcp/
Date: Mon, 13 Jul 2020 09:55:21 GMT
Content-Length: 18
Content-Type: text/plain; charset=utf-8
3

I created an issue: